LIVE FEED
Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider
HIGH Actively exploited CWE-416

CVE-2026-68820

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Microsoft·Windows Ancillary Function Driver for WinSock

7.0/ 10
CVSS 3.1
High severity
8.6%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 95% of all CVEs
Listed
CISA KEV catalog
Added
Aug 11, 2026
Fix due
Aug 25, 2026
Ransomware
Not known
Timeline
Published
Aug 11, 2026
Updated
Oct 30, 2026
First covered
Aug 11, 2026
Latest story
3 months ago

Summary

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CWE-416Use After Free

Attack profile

Attack vectorLocal
ComplexityHigh
PrivilegesLow
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

CISA required action

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Affected products

  • Microsoft Windows 10 Version 160710.0.14393.0 to before 10.0.14393.9418
  • Microsoft Windows 10 Version 180910.0.17763.0 to before 10.0.17763.9121
  • Microsoft Windows 10 Version 21H210.0.19044.0 to before 10.0.19044.7663
  • Microsoft Windows 10 Version 22H210.0.19045.0 to before 10.0.19045.7663
  • Microsoft Windows 11 version 23H210.0.22631.0 to before 10.0.22631.7517
  • Microsoft Windows 11 Version 23H210.0.22631.0 to before 10.0.22631.7517
  • Microsoft Windows 11 Version 24H210.0.26100.0 to before 10.0.26100.9168
  • Microsoft Windows 11 Version 25H210.0.26200.0 to before 10.0.26200.9168

References

CVE.org recordcve.org NVD entrynvd.nist.gov CISA KEV listingcisa.gov Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerabilitymsrc.microsoft.com
Daily at 7:00 AM Eastern

The 0700 Brief

Every new security and AI story, summarised in one email. Confirm by email, unsubscribe in one click.

43 readers have subscribed